-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
Tonda Core
Source -
CNA
CNA CVEs -
1
ADP CVEs -
0
CISA CVEs -
0
NVD CVEs -
0
Related CVEs
Related Vendors
Related Assigners
Reports
1
Vulnerabilities found
CVE-2026-65477
Assigner
-
Patchstack
Share
View Details
Assigner
-
Patchstack
CVSS Score
-
7.5
||
HIGH
EPSS
-
Not Assigned
Published
-
23 Jul, 2026 | 11:18
Updated
-
23 Jul, 2026 | 11:32
Rejected
-
Not Available
Known To Be Used In Ransomware Campaigns?
-
Not Available
KEV Added
-
Not Available
KEV Action Due Date
-
Not Available
WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
Action
-
Not Available
Vendor
-
Select-Themes
Product
-
Tonda Core
CWE ID
-
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')